Still getting this issue on my QNAP TVS-672XT running QuTS Hero h5.0.1.2277.
[skynet@SkynetNAS ~]$ lsmod
Module Size Used by Tainted: P
xt_ipvs 16384 0
ip_vs_rr 16384 0
ip_vs_ftp 16384 0
ip_vs 139264 11 xt_ipvs,ip_vs_rr,ip_vs_ftp
xt_nat 16384 8
xt_addrtype 16384 6
vfio_iommu_type1 36864 0
vhost_net 24576 1
vhost 40960 1 vhost_net
vhost_iotlb 16384 1 vhost
macvtap 16384 0
macvlan 28672 1 macvtap
tap 24576 2 vhost_net,macvtap
tun 49152 3 vhost_net
virtio_scsi 20480 0
virtio_pci 28672 0
virtio_net 49152 0
net_failover 20480 1 virtio_net
failover 16384 1 net_failover
virtio_mmio 16384 0
virtio_console 28672 0
virtio_blk 20480 0
virtio_balloon 20480 0
virtio_rng 16384 0
virtio_ring 28672 8 virtio_scsi,virtio_pci,virtio_net,virtio_mmio,virtio_console,virtio_blk,virtio_balloon,virtio_rng
virtio 16384 8 virtio_scsi,virtio_pci,virtio_net,virtio_mmio,virtio_console,virtio_blk,virtio_balloon,virtio_rng
kvm_intel 225280 6
kvm 516096 1 kvm_intel
thunderbolt_icm 49152 0
fbdisk 36864 0
rfcomm 69632 0
ksmbd 135168 0
usdm_drv 94208 0
intel_qat 286720 1 usdm_drv
uio 20480 1 intel_qat
iscsi_tcp 20480 0
libiscsi_tcp 28672 1 iscsi_tcp
libiscsi 53248 2 iscsi_tcp,libiscsi_tcp
scsi_transport_iscsi 90112 4 iscsi_tcp,libiscsi_tcp,libiscsi
zscst_vdisk 483328 0
scst 815104 1 zscst_vdisk
cfg80211 397312 0
br_netfilter 24576 0
bridge 172032 1 br_netfilter
stp 16384 1 bridge
bonding 163840 0
dummy 16384 0
xt_connmark 16384 2
xt_NFLOG 16384 5
ip6table_filter 16384 1
ip6_tables 24576 1 ip6table_filter
xt_conntrack 16384 7
xt_TCPMSS 16384 0
xt_LOG 16384 0
xt_set 16384 15
ip_set_hash_netiface 45056 1
ip_set_hash_net 45056 11
ip_set 40960 3 xt_set,ip_set_hash_netiface,ip_set_hash_net
xt_MASQUERADE 16384 14
xt_REDIRECT 16384 0
iptable_nat 16384 1
nf_nat 36864 5 ip_vs_ftp,xt_nat,xt_MASQUERADE,xt_REDIRECT,iptable_nat
xt_policy 16384 0
xt_mark 16384 10
8021q 28672 0
ipv6 475136 161 br_netfilter,bridge,[permanent]
uvcvideo 106496 0
videobuf2_v4l2 24576 1 uvcvideo
videobuf2_vmalloc 16384 1 uvcvideo
videobuf2_memops 16384 1 videobuf2_vmalloc
videobuf2_common 45056 2 uvcvideo,videobuf2_v4l2
snd_usb_caiaq 49152 0
snd_usb_audio 262144 0
snd_usbmidi_lib 28672 1 snd_usb_audio
snd_seq_midi 16384 0
snd_rawmidi 32768 3 snd_usb_caiaq,snd_usbmidi_lib,snd_seq_midi
fnotify 61440 1
nfsd 1208320 1 fnotify
udf 114688 0
isofs 45056 0
iTCO_wdt 16384 1
vfio_pci 61440 0
irqbypass 16384 4 kvm,vfio_pci
vfio_virqfd 16384 1 vfio_pci
vfio 28672 2 vfio_iommu_type1,vfio_pci
exfat 77824 0
ufsd 794624 1
jnl 32768 1 ufsd
cdc_acm 32768 0
pl2303 24576 0
usbserial 40960 1 pl2303
qm2_i2c 16384 0
zfs 8581120 21 scst
icp 393216 1 zfs
lpl 159744 4 zscst_vdisk,scst,zfs,icp
i2c_imc 20480 0
intel_ips 24576 0
drbd 413696 0
lru_cache 16384 1 drbd
flashcache 167936 0
dm_tier_hro_algo 24576 0
dm_thin_pool 229376 1 dm_tier_hro_algo
dm_bio_prison 24576 1 dm_thin_pool
dm_persistent_data 81920 1 dm_thin_pool
hal_netlink 16384 0
atlantic 266240 0
r8152 221184 0
usbnet 36864 0
mii 16384 1 usbnet
igb 225280 0
e1000e 245760 0
mv14xx 651264 0
mpt3sas 368640 0
scsi_transport_sas 40960 1 mpt3sas
raid_class 16384 1 mpt3sas
qla2xxx_qzst 831488 0
scsi_transport_fc 57344 1 qla2xxx_qzst
k10temp 16384 0
coretemp 16384 0
uas 28672 0
usb_storage 69632 4 uas
xhci_pci 16384 0
xhci_hcd 184320 1 xhci_pci
usblp 24576 0
uhci_hcd 45056 0
ehci_pci 16384 0
ehci_hcd 81920 1 ehci_pci
[skynet@SkynetNAS ~]$ sudo iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N CSFORWARD
-N DOCKER
-N DOCKER-ISOLATION-STAGE-1
-N DOCKER-ISOLATION-STAGE-2
-N DOCKER-USER
-N QUFIREWALL
-N SYSDOCKER
-N SYSDOCKER-ISOLATION-STAGE-1
-N SYSDOCKER-ISOLATION-STAGE-2
-N SYSDOCKER-USER
-A INPUT -m state --state NEW -j QUFIREWALL
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
-A FORWARD -o lxcbr0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o lxcbr0 -j DOCKER
-A FORWARD -i lxcbr0 ! -o lxcbr0 -j ACCEPT
-A FORWARD -i lxcbr0 -o lxcbr0 -j ACCEPT
-A FORWARD -j SYSDOCKER-USER
-A FORWARD -j SYSDOCKER-ISOLATION-STAGE-1
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o docker0 -j SYSDOCKER
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
-A FORWARD -i docker0 -o docker0 -j ACCEPT
-A FORWARD -j CSFORWARD
-A OUTPUT -m set --match-set BRNOIPSET src,dst -j DROP
-A CSFORWARD -i lxdbr0 -o lxdbr0 -j ACCEPT
-A CSFORWARD -i lxcbr0 -o lxcbr0 -j ACCEPT
-A CSFORWARD -i docker0 -o docker0 -j ACCEPT
-A CSFORWARD -o docker0 -m conntrack --ctstate INVALID,NEW -j DROP
-A CSFORWARD -o lxcbr0 -m conntrack --ctstate INVALID,NEW -j DROP
-A CSFORWARD -o lxdbr0 -m conntrack --ctstate INVALID,NEW -j DROP
-A DOCKER -d 10.0.3.3/32 ! -i lxcbr0 -o lxcbr0 -p tcp -m tcp --dport 8989 -j ACCEPT
-A DOCKER -d 10.0.3.5/32 ! -i lxcbr0 -o lxcbr0 -p tcp -m tcp --dport 6767 -j ACCEPT
-A DOCKER -d 10.0.3.2/32 ! -i lxcbr0 -o lxcbr0 -p tcp -m tcp --dport 9696 -j ACCEPT
-A DOCKER -d 10.0.3.7/32 ! -i lxcbr0 -o lxcbr0 -p tcp -m tcp --dport 7878 -j ACCEPT
-A DOCKER -d 10.0.3.8/32 ! -i lxcbr0 -o lxcbr0 -p tcp -m tcp --dport 8920 -j ACCEPT
-A DOCKER -d 10.0.3.8/32 ! -i lxcbr0 -o lxcbr0 -p tcp -m tcp --dport 8096 -j ACCEPT
-A DOCKER -d 10.0.3.8/32 ! -i lxcbr0 -o lxcbr0 -p udp -m udp --dport 7359 -j ACCEPT
-A DOCKER -d 10.0.3.8/32 ! -i lxcbr0 -o lxcbr0 -p udp -m udp --dport 1900 -j ACCEPT
-A DOCKER-ISOLATION-STAGE-1 -i lxcbr0 ! -o lxcbr0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -j RETURN
-A DOCKER-ISOLATION-STAGE-2 -o lxcbr0 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -j RETURN
-A DOCKER-USER -j RETURN
-A QUFIREWALL -i lxdbr0 -j ACCEPT
-A QUFIREWALL -i docker0 -j ACCEPT
-A QUFIREWALL -i lxcbr0 -j ACCEPT
-A QUFIREWALL ! -i lo -m set --match-set PSIRT.ipv4 src -j NFLOG --nflog-prefix "RULE=4 ACT=DROP"
-A QUFIREWALL ! -i lo -m set --match-set PSIRT.ipv4 src -j DROP
-A QUFIREWALL ! -i lo -m set --match-set TOR.ipv4 src -j NFLOG --nflog-prefix "RULE=5 ACT=DROP"
-A QUFIREWALL ! -i lo -m set --match-set TOR.ipv4 src -j DROP
-A QUFIREWALL -s 192.168.1.0/24 -i eth0 -j ACCEPT
-A QUFIREWALL -s 10.8.0.0/24 -i eth0 -j ACCEPT
-A QUFIREWALL -s 192.168.1.0/24 -i qvs0 -j ACCEPT
-A QUFIREWALL ! -i lo -j NFLOG --nflog-prefix "RULE=9 ACT=DROP"
-A QUFIREWALL ! -i lo -j DROP
-A SYSDOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j SYSDOCKER-ISOLATION-STAGE-2
-A SYSDOCKER-ISOLATION-STAGE-1 -j RETURN
-A SYSDOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A SYSDOCKER-ISOLATION-STAGE-2 -j RETURN
-A SYSDOCKER-USER -j RETURN